Sub-Processors
Last updated June 5, 2026
TrakSolv.ai (“TrakSolv”) engages a small number of third-party sub-processors to deliver its hosted server-side tracking services. We engage each sub-processor under a written contract requiring data-protection obligations no less protective than those in our Data Processing Agreement, and we remain responsible for their performance. We do not sell personal data.
The table below lists the sub-processors that may process personal data on our behalf in the course of providing the Services, together with each one’s purpose and primary processing location.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Hostinger International Ltd. | Virtual private server (VPS) hosting. Runs the TrakSolv application, the customer dashboard, the SQLite datastore, and every customer's server-side GTM (sGTM) Docker container. | All platform and customer data at rest and in transit on the server | EU (Lithuania) / data centre region selected for the VPS |
| Stripe, Inc. | Payment and subscription processing for paid plans. TrakSolv receives plan, subscription status, and partial card metadata only — full card numbers are handled by Stripe and never stored by TrakSolv. | Account holder billing data (name, email, billing details) | United States (with EU processing for EEA customers) |
| Sendinblue SAS (Brevo) | Transactional and service email delivery — account verification, password resets, billing notices, and operational alerts. | Account holder name and email address | EU (France) |
| Google LLC | Supplies the official server-side Google Tag Manager container image that each customer's sGTM container runs. Google does not receive Customer end-user data from us by virtue of providing the image; outbound forwarding to Google products happens only where the Customer configures it. | Container software image (no customer data transferred by us to provide it) | United States |
| Let's Encrypt (Internet Security Research Group) | Issues the TLS/SSL certificates that secure traksolv.ai and every customer's first-party tagging domain. Certificate issuance is automated by our Caddy reverse proxy and processes only the domain name being certified. | Domain names submitted for certificate issuance (no personal data) | United States |
| Customer-designated off-box backup target (via rclone) | Encrypted, off-box storage of platform database and report backups. The storage destination is configured by TrakSolv using its own credentials; the specific provider (e.g. an object-storage bucket) is chosen by TrakSolv and disclosed here when finalised. | Encrypted platform backups (may contain Customer and end-user data) | Depends on the configured backup destination |
Distinguishing sub-processors from Customer-directed destinations
The advertising and analytics platforms to which a customer’s sGTM container forwards data — for example Meta, Google Ads, TikTok, GA4, and similar conversion APIs — are not TrakSolv sub-processors. The customer chooses and configures those destinations and acts as the controller for that forwarding; each destination is an independent controller or processor engaged by the customer directly and is governed by that platform’s own terms.
Changes and notice
We may add or replace sub-processors as the Services evolve. Where required by the DPA, we will give affected customers reasonable prior notice of a new or replacement sub-processor so they can raise any reasonable objection. Material changes to this list will be reflected by updating the “Last updated” date above.
Contact
Questions about our sub-processors, or requests to be notified of changes, can be sent to arif@traksolv.ai.
